add checksum functions.
inject the checksum (sha256) in unit during publishing.
update importer, download file when not exist of has different checksum.